Threat Hunting in the Software Supply Chain: AI Edition

Step-by-step instructions to hunt six supply chain threats, plus three simulated attacks that show the methodology in action. Your dependencies now include models, datasets, and MCP servers — and most teams have no inventory of any of them.

What’s inside:

• Hunt six supply chain threats, step by step
• Map the three ways AI enters your build
• Spot a fake AI-suggested package before you install it
• Follow three real attacks from install hook to exfil
• Inventory the models, agents, and MCP servers you ship